GSMA Outlines Post-Quantum Cryptography Migration for Satellite Networks
Summary
GSMA's PQ.07 report outlines post-quantum migration for non-terrestrial networks, recommending cryptographic inventories, phased hybrid deployments and coordinated upgrades to address satellite hardware, latency and interoperability constraints.
Key points
- GSMA published PQ.07, Post Quantum Cryptography for Non-Terrestrial Networks, version 1.0, on February 4, 2026.
- The document covers satellite backhaul, direct-to-phone services and satellite IoT, including protection of ground infrastructure, command links and inter-satellite communications.
- It recommends identifying sensitive data and inventorying encryption, authentication and integrity mechanisms before prioritizing migration.
- A phased transition can begin with hybrid classical and post-quantum key exchange and signatures before moving to fully post-quantum schemes.
- Legacy hardware, limited onboard processing, larger certificates and constrained memory complicate upgrades; interoperability testing and vendor coordination are key dependencies.
- The report says PQC overhead primarily affects session establishment and authentication rather than ongoing symmetric encryption, making performance impacts event-based.
- Migration planning must coordinate satellite and mobile operators, equipment vendors and roaming partners while accounting for evolving protocol standards and national requirements.
Article Details
- Publisher
- GSM Association
- Report Period
- 2026-02-04
- Scope
- Post-quantum cryptography migration for non-terrestrial networks, covering satellite backhaul, direct-to-phone, satellite IoT, ground infrastructure, PKI, and legacy systems.
- Key Statistics
- The report cites typical satellite latency of 500 milliseconds for GEO, around 125 milliseconds for MEO, and 2–20 milliseconds for LEO; longer latency slows IPsec connection establishment and key re-establishment.
- Satellite maintenance cycles can exceed six months, reinforcing the need for compensating security controls.
- Recommendations
- Identify sensitive data and maintain a cryptographic inventory across satellite, ground, user, and inter-satellite interfaces to prioritize migration.
- Use phased migration beginning with hybrid key-exchange and signature schemes, maintaining backward compatibility before transitioning to pure post-quantum schemes.
- Update key exchange, digital signatures, and certificate management for quantum resistance, and test interoperability and performance under NTN latency and resource constraints.
- Protect the management plane, satellite command links, and ground infrastructure using defense-in-depth and secure communication channels.
- Coordinate migration roadmaps with equipment manufacturers, satellite and mobile operators, roaming partners, standards bodies, and regulators.